Vulnerabilities

TI-2026-23386 CVE-2026-29828 · GHSA-w35c-g8h6-fh9f

DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the…

LOW 26

DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00164 Published 2026-03-20 No fix listed CWE-79

TI-2025-35013 CVE-2025-55455 · GHSA-q7v7-vjj3-fwqp

DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download…

MEDIUM 50

DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00284 Published 2025-08-22 No fix listed CWE-434

TI-2025-35012 CVE-2025-55454 · GHSA-frm3-ggq4-6992

An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of…

MEDIUM 41

An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00669 Published 2025-08-22 No fix listed CWE-434

TI-2024-23130 CVE-2024-34906 · GHSA-92r4-x32m-jj5p

An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute…

MEDIUM 61

An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00398 Published 2024-05-15 No fix listed CWE-79

Vulnerabilities

Filters

DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the…

DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download…

An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of…

An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute…